$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFCD3/C4727A10EF8411EB929B0650C4F9AE02/wxT-rYcguxji2eIkk4K433VEbYs.mft File: wxT-rYcguxji2eIkk4K433VEbYs.mft (raw, json) Hash identifier: 1OpHzaiw5XdrrBFK0b0YJ7Ejvbfi/PwuYQwDh+CyJ7c= Subject key identifier: 3A:F3:64:FD:05:D8:30:39:A6:77:B2:15:6F:DF:A0:96:B1:50:60:D0 Authority key identifier: C3:14:FE:AD:87:20:BB:18:E2:D9:E2:24:93:82:B8:DF:75:44:6D:8B Certificate issuer: /CN=A91CFCD3/serialNumber=C314FEAD8720BB18E2D9E2249382B8DF75446D8B Certificate serial: 0532 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wxT-rYcguxji2eIkk4K433VEbYs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFCD3/C4727A10EF8411EB929B0650C4F9AE02/wxT-rYcguxji2eIkk4K433VEbYs.mft Manifest number: 052D Signing time: Fri 28 Mar 2025 23:46:37 +0000 Manifest this update: Fri 28 Mar 2025 23:46:37 +0000 Manifest next update: Fri 04 Apr 2025 23:46:37 +0000 Files and hashes: 1: wxT-rYcguxji2eIkk4K433VEbYs.crl (hash: FKOCZa8oXt9COsnR4BaugWPfhXOLCSczfHs5QfqRCo8=) 2: EDA4BE18EF8711EBAF811557C4F9AE02.roa (hash: XzFg7Hp2s0t/ygNB9X7ACgOTOxQW40ffh6L1IDqjhU8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFCD3/C4727A10EF8411EB929B0650C4F9AE02/wxT-rYcguxji2eIkk4K433VEbYs.crl rsync://rpki.apnic.net/member_repository/A91CFCD3/C4727A10EF8411EB929B0650C4F9AE02/wxT-rYcguxji2eIkk4K433VEbYs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wxT-rYcguxji2eIkk4K433VEbYs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Apr 2025 23:46:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1330 (0x532) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFCD3 Validity Not Before: Mar 28 23:46:37 2025 GMT Not After : Apr 4 23:46:37 2025 GMT Subject: CN=67e734dd-866f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:ad:f7:4c:14:63:c9:2e:21:a3:08:ea:23:a5: 74:2c:59:a4:03:ba:a5:e9:03:e6:25:c5:7d:62:26: 96:5b:be:83:58:ee:2d:80:54:20:f0:c2:d8:74:9a: b7:d3:fa:b0:27:0e:93:6a:4a:82:3a:6b:30:8c:95: e9:90:82:e6:2b:34:1c:93:f5:e1:3a:73:85:08:f5: 52:d3:fa:6f:35:40:66:26:e4:19:40:9b:e4:c3:f0: 32:b8:f6:92:1f:3c:cc:dc:4c:6b:ac:db:a4:36:ae: 4f:a6:79:66:16:1e:65:4c:fc:83:ff:21:c3:96:c9: f3:dc:33:60:13:30:b1:e4:6d:49:1b:2e:3e:02:45: 13:4a:5e:53:90:f0:cc:d7:ac:ba:37:cd:35:e0:d7: 0f:0b:7a:16:b4:75:86:15:d9:3c:a0:51:1d:04:e8: 48:3c:8c:19:fc:46:e7:c8:91:07:a0:04:03:2f:1d: d3:98:da:98:d6:c7:52:c6:a8:4e:3a:27:81:2b:4e: 76:a9:6a:74:22:23:83:30:bf:1e:f5:cb:17:10:e6: 34:7b:6f:7d:7d:ed:74:d1:e8:ee:a3:8a:a4:90:1c: 8b:19:1f:49:41:41:2c:f3:3e:0d:85:0a:78:fd:dd: 50:62:32:cb:6c:47:42:65:98:6b:f8:72:29:95:40: 5a:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:F3:64:FD:05:D8:30:39:A6:77:B2:15:6F:DF:A0:96:B1:50:60:D0 X509v3 Authority Key Identifier: keyid:C3:14:FE:AD:87:20:BB:18:E2:D9:E2:24:93:82:B8:DF:75:44:6D:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFCD3/C4727A10EF8411EB929B0650C4F9AE02/wxT-rYcguxji2eIkk4K433VEbYs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wxT-rYcguxji2eIkk4K433VEbYs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFCD3/C4727A10EF8411EB929B0650C4F9AE02/wxT-rYcguxji2eIkk4K433VEbYs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:65:09:86:3e:a7:7b:cc:fb:a7:d6:e5:80:25:2f:fc:2d:5c: e6:b8:f9:8d:aa:80:59:dc:be:8e:81:a2:41:6a:c2:3e:54:7b: 1d:24:d2:c1:95:4a:55:a7:2c:3a:84:48:01:65:c7:cb:b1:71: a8:d5:cf:5d:73:a2:12:69:31:53:d0:b0:74:13:89:db:f0:90: 86:81:c7:be:91:d3:d9:b9:e8:3f:97:20:c4:fd:8a:1e:63:79: 42:7c:a8:1c:4c:7b:21:87:01:87:5e:69:a4:63:9f:bd:c2:d8: d9:50:93:44:e4:8a:9f:ca:06:b0:7c:b5:0e:e0:aa:ed:49:ea: 14:c0:94:7d:9d:e4:8a:80:82:a1:c2:6e:22:8b:17:0b:da:be: b8:a5:9b:27:c5:54:16:bb:bb:53:dc:22:c4:1a:0e:19:c2:be: a7:0e:7d:d8:5e:73:71:90:00:9c:56:28:be:88:78:4c:8f:cc: da:a4:b3:89:28:7f:36:ce:d5:ab:1a:7d:0a:67:b1:b9:92:af: 86:7b:4a:50:0e:6c:ad:55:b4:fa:77:ab:c0:09:cc:79:e3:dd: a7:01:38:87:c7:cf:2d:ef:63:a4:cd:87:d4:8d:53:83:38:66: d1:11:59:83:53:28:93:21:de:af:e5:75:e9:52:6b:27:2b:2a: b8:08:43:5e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBTIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZDRDMxMTAvBgNVBAUTKEMzMTRGRUFEODcyMEJCMThFMkQ5RTIyNDkzODJCOERG NzU0NDZEOEIwHhcNMjUwMzI4MjM0NjM3WhcNMjUwNDA0MjM0NjM3WjAYMRYwFAYD VQQDEw02N2U3MzRkZC04NjZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0633TBRjyS4howjqI6V0LFmkA7ql6QPmJcV9YiaWW76DWO4tgFQg8MLYdJq3 0/qwJw6TakqCOmswjJXpkILmKzQck/XhOnOFCPVS0/pvNUBmJuQZQJvkw/AyuPaS HzzM3ExrrNukNq5PpnlmFh5lTPyD/yHDlsnz3DNgEzCx5G1JGy4+AkUTSl5TkPDM 16y6N8014NcPC3oWtHWGFdk8oFEdBOhIPIwZ/EbnyJEHoAQDLx3TmNqY1sdSxqhO OieBK052qWp0IiODML8e9csXEOY0e299fe100ejuo4qkkByLGR9JQUEs8z4NhQp4 /d1QYjLLbEdCZZhr+HIplUBa5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDrzZP0F 2DA5pneyFW/foJaxUGDQMB8GA1UdIwQYMBaAFMMU/q2HILsY4tniJJOCuN91RG2L MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkNEMy9DNDcyN0ExMEVG ODQxMUVCOTI5QjA2NTBDNEY5QUUwMi93eFQtclljZ3V4amkyZUlrazRLNDMzVkVi WXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3d4VC1yWWNndXhqaTJlSWtrNEs0MzNWRWJZcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RkNEMy9DNDcyN0ExMEVGODQxMUVCOTI5QjA2NTBDNEY5QUUwMi93eFQtclljZ3V4 amkyZUlrazRLNDMzVkViWXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB8ZQmGPqd7zPun1uWAJS/8LVzmuPmNqoBZ3L6OgaJBasI+VHsdJNLB lUpVpyw6hEgBZcfLsXGo1c9dc6ISaTFT0LB0E4nb8JCGgce+kdPZueg/lyDE/Yoe Y3lCfKgcTHshhwGHXmmkY5+9wtjZUJNE5IqfygawfLUO4KrtSeoUwJR9neSKgIKh wm4iixcL2r64pZsnxVQWu7tT3CLEGg4Zwr6nDn3YXnNxkACcVii+iHhMj8zapLOJ KH82ztWrGn0KZ7G5kq+Ge0pQDmytVbT6d6vACcx5492nATiHx88t72OkzYfUjVOD OGbREVmDUyiTId6v5XXpUmsnKyq4CENe -----END CERTIFICATE-----Generated at Fri Apr 4 22:09:17 2025 by rpki-client